I have no success..
It seems to me that the JWT authorization is not works.. I got "401" every time.
Look at this please, where I'm wrong? Or it's a bug?
Python code:
import jwt
import hashlib
import datetime
import calendar
import requests
def send_request(incoming_jwt, url, method, params={}):
print 'INCOMING JWT (FROM ATLASSIAN)'
print incoming_jwt
print ''
jwt_decoded = jwt.decode(incoming_jwt, verify=False)
print 'DECODED JWT FROM ATLASSIAN'
print jwt_decoded
print ''
jwt_model = JWT.objects.get(client_key=jwt_decoded['iss'])
full_url = jwt_model.base_url + url
print 'FULL URL'
print full_url
print ''
qsh = '%(method)s&%(path)s&' % {'method': method.upper(), 'path': urlparse.urlparse(full_url).path}
print 'QSH'
print qsh
print ''
iat = datetime.datetime.utcnow()
exp = iat + datetime.timedelta(minutes=3)
jwt_payload = {
'iss': jwt_model.client_key,
'iat': calendar.timegm(iat.utctimetuple()),
'exp': calendar.timegm(exp.utctimetuple()),
'qsh': hashlib.sha256(qsh).hexdigest(),
'sub': jwt_decoded['sub']
}
print 'NEW PAYLOAD'
print jwt_payload
print ''
new_jwt = jwt.encode(jwt_payload, jwt_model.shared_secret)
print 'NEW JWT'
print new_jwt
print ''
headers = {'Authorization': 'JWT %s' % new_jwt, 'Content-Type': 'application/json'}
print 'MAKE REQUEST...'
r = requests.get(full_url, params={'jwt': new_jwt}, headers=headers)
print 'DONE'
print '-' * 100
print 'ANSWER'
print '-' * 100
print 'REQUEST STATUS CODE'
print '-' * 100
print r.status_code
print '\n'
print 'ADDITIONAL INFO'
print '.' * 100
print 'REQUEST HEADERS'
print r.request.headers
print 'RESPONSE HEADERS'
print r.headers
print 'REQUEST URL'
print r.url
print '.' * 100
try:
return r.json()
except Exception as e:
return {}
print 'TRY TO SEND REQUEST'
print '-------------------'
print '\n'
print send_request(request.GET.get('jwt'), '/rest/api/2/myself', 'GET', {})
And it's output:
TRY TO SEND REQUEST
-------------------
INCOMING JWT (FROM ATLASSIAN)
eyJhbGciOiJIUzI1NiIsInR5cCI6IkpXVCJ9.eyJleHAiOjEzODk1MjA5MDUsInN1YiI6ImFkbWluIiwiaXNzIjoiamlyYTo4OWQ0OTFiYS1jYzA2LTRkZDMtYWQ1ZS0xMGRiZjg4MjBjZWUiLCJxc2giOiIwMTBiODkxYjYyYWEzNzU3OTY5ZmNkNGFiNjQ0ZDlkOTNkNWRhZDlhYjVmNTQ1ZWZiNTM2Njc5MzQ1OWVhNjQ4IiwiaWF0IjoxMzg5NTIwNzI1fQ.JqkPnzH32csHrHpmMj_mnufPYLhzHS4HgGAGWDabqH0
DECODED JWT FROM ATLASSIAN
{u'iss': u'jira:89d491ba-cc06-4dd3-ad5e-10dbf8820cee', u'iat': 1389520725, u'qsh': u'010b891b62aa3757969fcd4ab644d9d93d5dad9ab5f545efb5366793459ea648', u'sub': u'admin', u'exp': 1389520905}
FULL URL
http://localhost:2990/jira/rest/api/2/myself
QSH
GET&/jira/rest/api/2/myself&
NEW PAYLOAD
{'iss': u'jira:89d491ba-cc06-4dd3-ad5e-10dbf8820cee', 'iat': 1389520731, 'qsh': '02ea14e8eaf913b046969d8900cef66ad251394a2c5dd57f8fc9ee187780e69c', 'sub': u'admin', 'exp': 1389520911}
NEW JWT
eyJhbGciOiAiSFMyNTYiLCAidHlwIjogIkpXVCJ9.eyJpc3MiOiAiamlyYTo4OWQ0OTFiYS1jYzA2LTRkZDMtYWQ1ZS0xMGRiZjg4MjBjZWUiLCAiaWF0IjogMTM4OTUyMDczMSwgInFzaCI6ICIwMmVhMTRlOGVhZjkxM2IwNDY5NjlkODkwMGNlZjY2YWQyNTEzOTRhMmM1ZGQ1N2Y4ZmM5ZWUxODc3ODBlNjljIiwgInN1YiI6ICJhZG1pbiIsICJleHAiOiAxMzg5NTIwOTExfQ.9dFa_jR9TR6XTBi68KSTDqpLFSCzU7C47W_dBnO75Zc
MAKE REQUEST...
DONE
----------------------------------------------------------------------------------------------------
ANSWER
----------------------------------------------------------------------------------------------------
REQUEST STATUS CODE
----------------------------------------------------------------------------------------------------
401
ADDITIONAL INFO
....................................................................................................
REQUEST HEADERS
CaseInsensitiveDict({'Authorization': 'JWT eyJhbGciOiAiSFMyNTYiLCAidHlwIjogIkpXVCJ9.eyJpc3MiOiAiamlyYTo4OWQ0OTFiYS1jYzA2LTRkZDMtYWQ1ZS0xMGRiZjg4MjBjZWUiLCAiaWF0IjogMTM4OTUyMDczMSwgInFzaCI6ICIwMmVhMTRlOGVhZjkxM2IwNDY5NjlkODkwMGNlZjY2YWQyNTEzOTRhMmM1ZGQ1N2Y4ZmM5ZWUxODc3ODBlNjljIiwgInN1YiI6ICJhZG1pbiIsICJleHAiOiAxMzg5NTIwOTExfQ.9dFa_jR9TR6XTBi68KSTDqpLFSCzU7C47W_dBnO75Zc', 'Content-Type': 'application/json', 'Accept-Encoding': 'gzip, deflate, compress', 'Accept': '*/*', 'User-Agent': 'python-requests/2.2.0 CPython/2.7.6 Darwin/13.0.0'})
RESPONSE HEADERS
CaseInsensitiveDict({'x-content-type-options': 'nosniff', 'transfer-encoding': 'chunked', 'set-cookie': 'JSESSIONID=985234C0149A215E9B82A9E51F6060DF; Path=/jira/; HttpOnly', 'server': 'Apache-Coyote/1.1', 'date': 'Sun, 12 Jan 2014 09:58:51 GMT', 'content-type': 'text/html;charset=ISO-8859-1'})
REQUEST URL
http://localhost:2990/jira/rest/api/2/myself?jwt=eyJhbGciOiAiSFMyNTYiLCAidHlwIjogIkpXVCJ9.eyJpc3MiOiAiamlyYTo4OWQ0OTFiYS1jYzA2LTRkZDMtYWQ1ZS0xMGRiZjg4MjBjZWUiLCAiaWF0IjogMTM4OTUyMDczMSwgInFzaCI6ICIwMmVhMTRlOGVhZjkxM2IwNDY5NjlkODkwMGNlZjY2YWQyNTEzOTRhMmM1ZGQ1N2Y4ZmM5ZWUxODc3ODBlNjljIiwgInN1YiI6ICJhZG1pbiIsICJleHAiOiAxMzg5NTIwOTExfQ.9dFa_jR9TR6XTBi68KSTDqpLFSCzU7C47W_dBnO75Zc
....................................................................................................
What is it?
Thanks
You must be a registered user to add a comment. If you've already registered, sign in. Otherwise, register and sign in.